Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/5GQUPOVGommpVDGycPNjbxgsAD0.roa
File: 5GQUPOVGommpVDGycPNjbxgsAD0.roa (raw, json)
Hash identifier: FIE52nDWdmLHUw5eNYHFQW5KOb1fH0QVln67hfDRIhI=
Subject key identifier: E4:64:14:3C:E5:46:A2:69:A9:54:31:B2:70:F3:63:6F:18:2C:00:3D
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 019423D808212FAD2C9DD4FA91478A46EADF
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/5GQUPOVGommpVDGycPNjbxgsAD0.roa
Signing time: Wed 01 Jan 2025 21:49:07 +0000
ROA not before: Wed 01 Jan 2025 21:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2103
IP address blocks: 134.246.0.0/16 maxlen: 16
134.246.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:08:21:2f:ad:2c:9d:d4:fa:91:47:8a:46:ea:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Jan 1 21:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e464143ce546a269a95431b270f3636f182c003d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:71:d7:6c:f9:78:bf:f6:99:bf:d2:f0:ff:
fa:16:71:27:58:20:ac:9f:7c:71:c1:63:ff:14:a6:
e3:f3:a0:99:d8:99:a7:2f:5e:d1:5e:76:8a:6c:df:
98:b0:9e:57:6b:d9:85:7a:ec:1d:59:2f:e1:7d:d9:
27:90:dd:6a:a2:48:54:c4:9b:bd:3a:a3:53:0b:72:
06:6a:ff:51:be:09:f6:69:46:b1:b5:17:50:cb:ec:
f1:37:b1:26:99:13:9c:12:bb:35:7f:d3:20:50:a7:
a2:19:e5:6e:05:6a:1d:73:d0:ff:37:51:b0:9d:57:
84:9d:58:eb:7c:19:93:59:27:18:87:83:f6:72:9f:
57:10:f2:39:ab:b5:f9:da:23:e3:80:6a:46:f1:e6:
47:7b:69:41:b3:e7:84:18:72:d1:3c:18:26:5b:1a:
46:58:44:d8:ba:0f:f6:34:f4:ce:8b:e2:78:14:de:
92:fc:97:1b:63:e6:f9:8d:fb:04:3a:5d:8c:4c:ac:
f3:75:84:e4:c2:12:d7:3c:f3:53:4a:31:48:9d:f9:
16:fb:45:dd:be:da:8f:ee:80:49:e3:2a:d8:f7:ea:
4a:4f:6f:12:3a:52:c7:27:e7:82:0e:c0:93:52:f4:
6c:b6:f8:2e:2f:99:2d:4a:11:53:09:54:c2:b4:e5:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:64:14:3C:E5:46:A2:69:A9:54:31:B2:70:F3:63:6F:18:2C:00:3D
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/5GQUPOVGommpVDGycPNjbxgsAD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.246.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:b2:04:e5:89:59:37:45:98:ba:ec:c8:1d:23:ff:66:16:38:
e6:7d:0a:f9:21:e6:26:26:e8:51:11:f8:2d:d0:0c:d2:91:27:
38:65:e1:4b:f1:00:0b:62:86:c6:a3:1f:39:b7:ec:54:2b:7d:
73:91:98:43:48:78:d9:65:82:a1:33:ec:d7:34:f3:20:69:0d:
bf:ff:65:68:dd:6f:de:3e:4b:c3:f3:c9:b7:d9:89:ea:4e:b5:
fd:61:ad:fb:16:24:7f:6c:b3:3a:e9:d2:22:72:38:ef:8b:32:
56:78:95:f2:ca:00:fd:1c:45:73:49:84:28:f9:57:1e:fb:96:
8b:ae:9c:b0:8f:f5:24:08:bf:d4:a2:bc:6a:3e:d8:e7:cc:75:
04:7c:6e:2e:ea:86:f7:ad:4b:f9:2d:c4:dc:4f:e9:c6:80:1a:
9d:16:96:59:51:9e:00:1d:a5:78:81:36:83:0e:1a:4d:67:01:
35:01:da:2b:32:13:5d:8b:08:75:5d:22:c2:39:55:97:53:39:
ca:76:1a:dc:db:6b:09:a3:5e:a8:ff:be:90:c0:cf:d0:e9:d4:
48:53:ca:fb:4a:b8:51:4f:8a:95:05:ec:f6:d8:e9:99:80:6c:
2a:10:4e:cc:4d:ac:bd:b3:05:f0:04:b1:0e:d0:e3:f5:ec:01:
88:4b:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:21 2025 by rpki-client